dsh-web-search-plugin 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 本项目的重要变更都记录在此。格式遵循 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)，版本号遵循 [Semantic Versioning](https://semver.org/lang/zh-CN/)。
 
+## [0.4.0] - 2026-09-02
+
+### 变更
+
+- **适配 DeepSeek Harness 最新 main（`0.1.2-alpha.4`）**：`@deepseek-ai/dsh-settings` 已移除顶层 `installSettingsSection` / `settingsNamespace`，Host 侧改为在 `ctx.inject(['settings'])` 后调用 `settingsCtx.settings.installSection(ctx, ...)`；settings namespace 直接使用普通字符串。
+- **浏览器端移除对 `@deepseek-ai/dsh-client-runtime` / 旧 `connection` 的依赖**：该包已不在最新 Harness workspace / 客户端模块表中。`createSnapshotStore` 改从平台常驻模块 `@deepseek-ai/dsh-client-store` 导入；`dsh.client.inject` 与客户端 `inject` 对齐为 `slots` / `locale` / `remote` / `settingsScope`。
+- **凭据远端接口迁移到 `ctx.remote`**：`credentials.describe(refs[])` / `set(ref, value)` 使用最新 Remote 参数与响应形状（`{ ok, value }`）；凭据变更事件从 `credentials/updated` 改为 `credentials/reference-updated`；不再经旧 `connection.api` 调用。
+- peerDependencies 中 dsh 包版本从 `0.1.0-rc.7` 提升到 `0.1.2-alpha.4`；`@deepseek-ai/cordis` / `@deepseek-ai/schemastery` 分别对齐 `^4.0.2` / `^3.18.2`；版本号升至 `0.4.0`，`User-Agent` 同步。
+
+## [0.3.1] - 2026-08-30
+
+### 修复
+
+- **Tavily keyless 模式失效**：通用 REST 后端不再在 keyless 模式下强制解析 API key；无 key 时只发送 `x-tavily-access-mode: keyless`，可正常使用免费额度。
+- **POST 类 provider 的 count 参数类型错误**：Tavily `max_results`、Serper `num`、Exa `num_results`、Firecrawl `limit` 等在 JSON body 中恢复为数字，不再被强转字符串。
+- **Scavio / Firecrawl 设置卡严重卡死**：补齐浏览器端缺失的 `scavioApiKeyEnv` / `scavioBaseURL` / `firecrawlApiKeyEnv` / `firecrawlBaseURL` 表单字段与投影，修复切换后输入框无法输入、引擎无法切换的问题。
+- **Scavio / Firecrawl 默认凭据名错误**：未显式填写 keyEnv 时分别回退到 `SCAVIO_API_KEY` / `FIRECRAWL_API_KEY`，不再错误使用 `EXA_API_KEY`。
+- **Brave 环境代理回退丢失**：恢复 `HTTPS_PROXY` / `HTTP_PROXY` 环境变量回退，未显式配置 `proxy` 时也能按环境代理请求。
+- `User-Agent` 更新为 `0.3.1`。
+
+### 优化
+
+- 内置 REST 渠道（Serper / SerpApi / Exa / SearXNG / Scavio / Firecrawl）的 Base URL 默认值预填到设置卡，切换渠道后不再是空 URL。
+
 ## [0.3.0] - 2026-08-25
 
 ### 新增
@@ -84,7 +108,7 @@
 
 ### 修复
 
-- **客户端 bundle 缺少 `exports.inject`**（`lib/client.js`）。浏览器插件原先只导出 `apply`，cordis 的 `fiber.inject` 为空，访问 `ctx.locale` 等服务会抛 `cannot get property "locale" without inject`。现在导出 `inject = ["slots", "locale", "connection", "remote", "settingsScope"]`。
+- **客户端 bundle 缺少 `exports.inject`**（`lib/client.js`）。浏览器插件原先只导出 `apply`，cordis 的 `fiber.inject` 为空，访问 `ctx.locale` 等服务会抛 `cannot get property "locale" without inject`。现在导出 `inject = ["slots", "locale", "remote", "settingsScope"]`。
 - **插件卡片的 slot 注册**（`lib/client.js`）。卡片按 rc.6 的 `id`/`order` 形状注册进 `settings.plugin.item`；该 slot 从 rc.6+ 起是 keyed 的，必须带 `key: "dsh-web-search-plugin"`。
 - **`CardForm.field("apiKey")` 崩溃**（`lib/client.js`）。只写凭据字段没有 section spec，对 `undefined` 调用 `spec.format(...)` 会在卡片投影时抛 `Cannot read properties of undefined (reading 'format')`。已加上 secret 字段分支（对齐官方 `CardForm`）。
 - **`dsh.client.inject` 补上 `@deepseek-ai/dsh-client-ui-slots`**（`package.json`），与社区插件的加载集合一致。

package/README.md

@@ -17,19 +17,19 @@
 
 ## 特性
 
-- 与官方 `@deepseek-ai/dsh-web-search-deepseek` 相同的提供方约定：`inject: ['web']` + `installSettingsSection` + `ctx.web.registerSearchProvider`。
+- 与官方 `@deepseek-ai/dsh-web-search-deepseek` 相同的提供方约定：`inject: ['web']` + `ctx.settings.installSection` + `ctx.web.registerSearchProvider`。
 - 顶层 **设置 → 网页搜索** 分区：两列布局、未保存草稿、保存 toast；结果数量为 1–20 下拉。
 - **默认引擎为 DeepSeek（官方）**：新装 / 未显式改动时，搜索直接走 `deepseek-official`，不再依赖 keyless 的 Tavily。
 - 纯 REST 后端由**静态元数据表 + 通用后端**驱动，新增 provider 即"表里加一行 + 官方跳转链接"，无定制执行代码。
 - Tavily keyless 无需密钥即可用；Brave 需要订阅 token（若本机已有 `BRAVE_API_KEY` 凭据，可直接复用）。
 - Tavily keyed / Brave 在设置卡展示额度进度条（DeepSeek 官方与 Tavily keyless / 其余 REST 后端不展示）。
 - 各引擎结果都规范化为接缝的 `WebSearchResult`（可选 `content` + `sources[]`），按 URL 去重。
-- 设置段 `dsh-web-search-plugin` 通过 rc.7 的 `settings.describe()` 动态暴露，不需要宿主白名单补丁，也不需要自建回环 settings 桥。
+- 设置段 `dsh-web-search-plugin` 通过 dsh 的 `settings.installSection` 注册、由 `settings.describe()` 动态暴露，不需要宿主白名单补丁，也不需要自建回环 settings 桥。
 - 错误映射为 `WEB_PROVIDER_ERROR` / `WEB_ABORTED` / `WEB_PROVIDER_CREDENTIAL_MISSING`。
 
 ## 运行要求
 
-- DeepSeek Harness `0.1.0-rc.7` 或更新
+- DeepSeek Harness `0.1.2-alpha.4`（最新 main）或更新
 - pnpm，用于通过 `dsh plugin` 把插件装进 profile
 
 ## 安装
@@ -189,7 +189,7 @@ dsh plugin --profile web remove @dsh-ltctfer/dsh-web-search-brave
 npm run check
 ```
 
-客户端 bundle 必须保持 `window.__ModuleLoader__.load({ id, factory })` 线格式 — 由 `dsh-client-modules` 加载，不是打包器。必须同时导出 `apply` 和 `inject`（`slots`、`locale`、`connection`、`remote`、`settingsScope`），并把分区注册进 `settings.section`（`id: "web-search"`）。
+客户端 bundle 必须保持 `window.__ModuleLoader__.load({ id, factory })` 线格式 — 由 `dsh-client-modules` 加载，不是打包器。必须同时导出 `apply` 和 `inject`（`slots`、`locale`、`remote`、`settingsScope`），并把分区注册进 `settings.section`（`id: "web-search"`）。
 
 ## 发布
 

package/lib/client.js

@@ -21,18 +21,18 @@ window.__ModuleLoader__.load({
 		var exports = module.exports;
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 		let react = require("react");
-		let _deepseek_ai_dsh_client_runtime_client = require("@deepseek-ai/dsh-client-runtime/client");
+		let _deepseek_ai_dsh_client_store = require("@deepseek-ai/dsh-client-store");
 
 		/** Settings namespace of this plugin. */
 		const NS = "dsh-web-search-plugin";
 		/** Built-in REST providers (mirrors `lib/providers.js`; browser bundle is self-contained). */
 		const BUILTIN_REST_PROVIDERS = [
-			{ id: "serper", name: "Serper", officialUrl: "https://serper.dev/", keyRequired: true, keyField: "serperApiKey", keyEnvField: "serperApiKeyEnv", baseURLField: "serperBaseURL" },
-			{ id: "serpapi", name: "SerpApi", officialUrl: "https://serpapi.com/", keyRequired: true, keyField: "serpapiApiKey", keyEnvField: "serpapiApiKeyEnv", baseURLField: "serpapiBaseURL" },
-			{ id: "exa", name: "Exa", officialUrl: "https://dashboard.exa.ai/", keyRequired: true, keyField: "exaApiKey", keyEnvField: "exaApiKeyEnv", baseURLField: "exaBaseURL" },
-			{ id: "searxng", name: "SearXNG", officialUrl: "https://docs.searxng.org/", keyRequired: false, keyField: "", keyEnvField: "", baseURLField: "searxngBaseURL" },
-			{ id: "scavio", name: "Scavio", officialUrl: "https://scavio.dev/", keyRequired: true, keyField: "scavioApiKey", keyEnvField: "scavioApiKeyEnv", baseURLField: "scavioBaseURL" },
-			{ id: "firecrawl", name: "Firecrawl", officialUrl: "https://firecrawl.dev/", keyRequired: true, keyField: "firecrawlApiKey", keyEnvField: "firecrawlApiKeyEnv", baseURLField: "firecrawlBaseURL" }
+			{ id: "serper", name: "Serper", officialUrl: "https://serper.dev/", defaultBaseURL: "https://google.serper.dev", keyRequired: true, keyField: "serperApiKey", keyEnvField: "serperApiKeyEnv", baseURLField: "serperBaseURL" },
+			{ id: "serpapi", name: "SerpApi", officialUrl: "https://serpapi.com/", defaultBaseURL: "https://serpapi.com", keyRequired: true, keyField: "serpapiApiKey", keyEnvField: "serpapiApiKeyEnv", baseURLField: "serpapiBaseURL" },
+			{ id: "exa", name: "Exa", officialUrl: "https://dashboard.exa.ai/", defaultBaseURL: "https://api.exa.ai", keyRequired: true, keyField: "exaApiKey", keyEnvField: "exaApiKeyEnv", baseURLField: "exaBaseURL" },
+			{ id: "searxng", name: "SearXNG", officialUrl: "https://docs.searxng.org/", defaultBaseURL: "https://searx.be", keyRequired: false, keyField: "", keyEnvField: "", baseURLField: "searxngBaseURL" },
+			{ id: "scavio", name: "Scavio", officialUrl: "https://scavio.dev/", defaultBaseURL: "https://api.scavio.dev", keyRequired: true, keyField: "scavioApiKey", keyEnvField: "scavioApiKeyEnv", baseURLField: "scavioBaseURL" },
+			{ id: "firecrawl", name: "Firecrawl", officialUrl: "https://firecrawl.dev/", defaultBaseURL: "https://api.firecrawl.dev", keyRequired: true, keyField: "firecrawlApiKey", keyEnvField: "firecrawlApiKeyEnv", baseURLField: "firecrawlBaseURL" }
 		];
 		/** Find a built-in REST provider by id. */
 		function builtinRest(id) {
@@ -334,9 +334,9 @@ window.__ModuleLoader__.load({
 		 * spec and are written through the credentials domain.
 		 */
 		var SearchCardForm = class {
-			constructor(scope, api) {
+			constructor(scope, remote) {
 				this.scope = scope;
-				this.api = api;
+				this.remote = remote;
 				this.specs = new Map([
 					choiceField("provider"),
 					choiceField("mode"),
@@ -364,7 +364,11 @@ window.__ModuleLoader__.load({
 					textField("serpapiBaseURL"),
 					textField("exaApiKeyEnv"),
 					textField("exaBaseURL"),
-					textField("searxngBaseURL")
+					textField("searxngBaseURL"),
+					textField("scavioApiKeyEnv"),
+					textField("scavioBaseURL"),
+					textField("firecrawlApiKeyEnv"),
+					textField("firecrawlBaseURL")
 				].map((spec) => [spec.field, spec]));
 				this.staged = new Map();
 				this.saving = false;
@@ -387,7 +391,7 @@ window.__ModuleLoader__.load({
 				this.readCredential();
 			}
 			bind(project) {
-				const store = (0, _deepseek_ai_dsh_client_runtime_client.createSnapshotStore)(project());
+				const store = (0, _deepseek_ai_dsh_client_store.createSnapshotStore)(project());
 				this.listeners.add(() => {
 					store.set(project());
 				});
@@ -577,7 +581,7 @@ window.__ModuleLoader__.load({
 			restKeyRef(rest) {
 				const declared = this.sectionValue(rest.keyEnvField);
 				if (declared !== void 0 && declared.length > 0) return declared;
-				return rest.id === "serper" ? "SERPER_API_KEY" : rest.id === "serpapi" ? "SERPAPI_API_KEY" : "EXA_API_KEY";
+				return rest.id === "serper" ? "SERPER_API_KEY" : rest.id === "serpapi" ? "SERPAPI_API_KEY" : rest.id === "exa" ? "EXA_API_KEY" : rest.id === "scavio" ? "SCAVIO_API_KEY" : "FIRECRAWL_API_KEY";
 			}
 			async readCredential() {
 				const ref = this.refOf();
@@ -587,12 +591,12 @@ window.__ModuleLoader__.load({
 				}
 				let response;
 				try {
-					response = await this.api.credentials.describe({ refs: [ref] });
+					response = await this.remote.credentials.describe([ref]);
 				} catch (_credentialReadFailure) {
 					return;
 				}
-				if (!response.result.ok || ref !== this.refOf()) return;
-				const view = response.result.value.credentials[ref];
+				if (!response.ok || ref !== this.refOf()) return;
+				const view = response.value[ref];
 				const next = {
 					ref,
 					configured: view?.configured ?? false,
@@ -615,7 +619,8 @@ window.__ModuleLoader__.load({
 					ref = rest !== void 0 ? this.restKeyRef(rest) : this.tavilyRef();
 				}
 				try {
-					await this.api.credentials.set({ ref, value });
+					const response = await this.remote.credentials.set(ref, value);
+					if (!response.ok) return false;
 				} catch (_credentialWriteFailure) {}
 				await this.readCredential();
 				return this.credential.ref === ref ? this.credential.configured : true;
@@ -624,10 +629,10 @@ window.__ModuleLoader__.load({
 
 		/** Bridges the plugin scope and the credentials domain onto the card. */
 		var SearchCardController = class {
-			constructor(scope, api) {
+			constructor(scope, remote) {
 				this.scope = scope;
-				this.api = api;
-				this.form = new SearchCardForm(scope, api);
+				this.remote = remote;
+				this.form = new SearchCardForm(scope, remote);
 				this.store = this.form.bind(() => this.projection());
 				scope.subscribe(() => {
 					this.form.readCredential();
@@ -669,6 +674,12 @@ window.__ModuleLoader__.load({
 					exaApiKeyEnv: this.form.field("exaApiKeyEnv"),
 					exaBaseURL: this.form.field("exaBaseURL"),
 					searxngBaseURL: this.form.field("searxngBaseURL"),
+					scavioApiKey: this.form.field("scavioApiKey"),
+					scavioApiKeyEnv: this.form.field("scavioApiKeyEnv"),
+					scavioBaseURL: this.form.field("scavioBaseURL"),
+					firecrawlApiKey: this.form.field("firecrawlApiKey"),
+					firecrawlApiKeyEnv: this.form.field("firecrawlApiKeyEnv"),
+					firecrawlBaseURL: this.form.field("firecrawlBaseURL"),
 					apiKeyConfigured: this.form.credential.configured,
 					apiKeyWritable: this.form.credential.writable,
 					toastKey: this.form.toastKey
@@ -1075,7 +1086,7 @@ window.__ModuleLoader__.load({
 						fieldRow(t("apiKey"), keyHint, secretInput({ id: "ws-" + restMeta.id + "-key", value: state[restMeta.keyField]?.text ?? "", disabled: !state.apiKeyWritable, placeholder: state.apiKeyConfigured ? t("apiKeySet") : t("apiKeyUnset"), onChange: (e) => actions.edit(restMeta.keyField, e.target.value) })),
 						row(restMeta.keyEnvField, t("apiKeyEnv"), t("apiKeyEnvHint"), textInput({ id: "ws-" + restMeta.id + "-keyref", value: state[restMeta.keyEnvField]?.text ?? "", disabled, onChange: (e) => actions.edit(restMeta.keyEnvField, e.target.value) }))
 					) : null,
-					row(restMeta.baseURLField, t("baseURL"), t("baseURLHint"), textInput({ id: "ws-" + restMeta.id + "-base", value: state[restMeta.baseURLField]?.text ?? "", disabled, onChange: (e) => actions.edit(restMeta.baseURLField, e.target.value) })),
+					row(restMeta.baseURLField, t("baseURL"), t("baseURLHint"), textInput({ id: "ws-" + restMeta.id + "-base", value: state[restMeta.baseURLField]?.text || restMeta.defaultBaseURL || "", disabled, onChange: (e) => actions.edit(restMeta.baseURLField, e.target.value) })),
 					maxResultsRow
 				) : null,
 				react.createElement("div", { style: { borderTop: "1px solid var(--dsw-alias-border-l2)", justifyContent: "flex-end", alignItems: "center", gap: "8px", padding: "12px 0 4px", display: "flex" } },
@@ -1140,11 +1151,10 @@ window.__ModuleLoader__.load({
 
 		/** Mount the top-level "Web search" settings section. */
 		function apply(ctx) {
-			const { api } = ctx.get("connection");
 			const t = ctx.locale.bind(NS);
 			ctx.effect(() => ctx.locale.register(NS, { zh, en }), "dsh-web-search-plugin: card dictionaries");
-			const controller = new SearchCardController(ctx.settingsScope.bind({ namespace: NS }), api);
-			ctx.effect(() => ctx.remote.$on("credentials/updated", (ref) => {
+			const controller = new SearchCardController(ctx.settingsScope.bind({ namespace: NS }), ctx.remote);
+			ctx.effect(() => ctx.remote.$on("credentials/reference-updated", (ref) => {
 				controller.form.refreshCredential(ref);
 			}), "dsh-web-search-plugin: credential invalidations");
 			ctx.effect(() => usageStore.start(), "dsh-web-search-plugin: usage poll");
@@ -1158,7 +1168,7 @@ window.__ModuleLoader__.load({
 			}, makeSection(ctx, controller)));
 		}
 
-		const inject = ["slots", "locale", "connection", "remote", "settingsScope"];
+		const inject = ["slots", "locale", "remote", "settingsScope"];
 
 		exports.apply = apply;
 		exports.inject = inject;

package/lib/index.js

@@ -17,7 +17,7 @@
  * @module dsh-web-search-plugin
  */
 import z from "@deepseek-ai/schemastery";
-import { installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
+import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
 import { MAX_RESULTS_CAP } from "./shared.js";
 import { TAVILY_DEFAULT_API_KEY_ENV, TAVILY_DEFAULT_BASE_URL, TavilySearchProvider, resolveTavilyOptions } from "./tavily.js";
 import { BRAVE_DEFAULT_API_KEY_ENV, BRAVE_DEFAULT_BASE_URL, BraveSearchProvider, resolveBraveOptions } from "./brave.js";
@@ -33,6 +33,8 @@ const SEARCH_PROVIDER_ID = "dsh-web-search";
 const name = "dsh-web-search-plugin";
 /** The web seam this provider registers into. */
 const inject = ["web"];
+/** Settings namespace carrying this plugin's backend switch and options. */
+const WEB_SEARCH_SETTINGS_NAMESPACE = "dsh-web-search-plugin";
 
 /** Plugin config (all optional — `apply` fills defaults). */
 const Config = z.object({
@@ -73,33 +75,33 @@ const Config = z.object({
 	/** Credential reference for Serper search. */
 	serperApiKeyEnv: z.string().role("credential-ref").default("SERPER_API_KEY"),
 	/** Serper endpoint base. `/search` is appended. */
-	serperBaseURL: z.string().default(""),
+	serperBaseURL: z.string().default("https://google.serper.dev"),
 	/** Literal SerpApi API key; prefer {@link serpapiApiKeyEnv}. */
 	serpapiApiKey: z.string().role("secret").default(""),
 	/** Credential reference for SerpApi search. */
 	serpapiApiKeyEnv: z.string().role("credential-ref").default("SERPAPI_API_KEY"),
 	/** SerpApi endpoint base. `/search.json` is appended. */
-	serpapiBaseURL: z.string().default(""),
+	serpapiBaseURL: z.string().default("https://serpapi.com"),
 	/** Literal Exa API key; prefer {@link exaApiKeyEnv}. */
 	exaApiKey: z.string().role("secret").default(""),
 	/** Credential reference for Exa search. */
 	exaApiKeyEnv: z.string().role("credential-ref").default("EXA_API_KEY"),
 	/** Exa endpoint base. `/search` is appended. */
-	exaBaseURL: z.string().default(""),
+	exaBaseURL: z.string().default("https://api.exa.ai"),
 	/** Optional SearXNG instance base URL (self-hosted). `/search` is appended. */
-	searxngBaseURL: z.string().default(""),
+	searxngBaseURL: z.string().default("https://searx.be"),
 	/** Literal Scavio API key; prefer {@link scavioApiKeyEnv}. */
 	scavioApiKey: z.string().role("secret").default(""),
 	/** Credential reference for Scavio search. */
 	scavioApiKeyEnv: z.string().role("credential-ref").default("SCAVIO_API_KEY"),
 	/** Scavio endpoint base. `/api/v2/google` is appended. */
-	scavioBaseURL: z.string().default(""),
+	scavioBaseURL: z.string().default("https://api.scavio.dev"),
 	/** Literal Firecrawl API key; prefer {@link firecrawlApiKeyEnv}. */
 	firecrawlApiKey: z.string().role("secret").default(""),
 	/** Credential reference for Firecrawl search. */
 	firecrawlApiKeyEnv: z.string().role("credential-ref").default("FIRECRAWL_API_KEY"),
 	/** Firecrawl endpoint base. `/v2/search` is appended. */
-	firecrawlBaseURL: z.string().default(""),
+	firecrawlBaseURL: z.string().default("https://api.firecrawl.dev"),
 	/** Literal DeepSeek API key; prefer {@link deepseekApiKeyEnv}. */
 	deepseekApiKey: z.string().role("secret").default(""),
 	/** Credential reference for DeepSeek search. */
@@ -116,11 +118,6 @@ const Config = z.object({
 	maxUses: z.number().step(1).min(1).default(5)
 });
 
-/** Settings namespace carrying this plugin's backend switch and options. */
-const WEB_SEARCH_SETTINGS_NAMESPACE = settingsNamespace("dsh-web-search-plugin");
-/** @deprecated Use {@link WEB_SEARCH_SETTINGS_NAMESPACE}. */
-const WEB_SEARCH_TAVILY_SETTINGS_NAMESPACE = WEB_SEARCH_SETTINGS_NAMESPACE;
-
 /**
  * One seam-facing provider whose `id` stays `dsh-web-search`. The active
  * backend is read from the live settings section on every `available` /
@@ -176,7 +173,7 @@ function resolveOptions(ctx, config) {
 	// metadata row's default is not enough (self-hosted SearXNG, proxied
 	// providers, custom key refs).
 	const keySourceByProvider = {
-		brave: { literal: config.braveApiKey, envName: config.braveApiKeyEnv ?? BRAVE_DEFAULT_API_KEY_ENV, baseURL: config.braveBaseURL ?? "", proxy: config.proxy },
+		brave: { literal: config.braveApiKey, envName: config.braveApiKeyEnv ?? BRAVE_DEFAULT_API_KEY_ENV, baseURL: config.braveBaseURL ?? "", proxy: config.proxy || launchEnvironmentOf(ctx).get("HTTPS_PROXY")?.value || launchEnvironmentOf(ctx).get("HTTP_PROXY")?.value || "" },
 		tavily: { literal: config.apiKey, envName: config.apiKeyEnv ?? TAVILY_DEFAULT_API_KEY_ENV, baseURL: config.baseURL ?? "" },
 		serper: { literal: config.serperApiKey, envName: config.serperApiKeyEnv ?? "SERPER_API_KEY", baseURL: config.serperBaseURL ?? "" },
 		serpapi: { literal: config.serpapiApiKey, envName: config.serpapiApiKeyEnv ?? "SERPAPI_API_KEY", baseURL: config.serpapiBaseURL ?? "" },
@@ -253,11 +250,13 @@ function sendJson(res, statusCode, data) {
 /** Register the dispatched search provider with `ctx.web`. */
 function apply(ctx, config) {
 	let current = () => config;
-	installSettingsSection(ctx, WEB_SEARCH_SETTINGS_NAMESPACE, Config, config, {
-		setSource: (source) => {
-			current = source;
-		},
-		onChange: () => {}
+	ctx.inject(["settings"], (settingsCtx) => {
+		settingsCtx.settings.installSection(ctx, WEB_SEARCH_SETTINGS_NAMESPACE, Config, config, {
+			setSource: (source) => {
+				current = source;
+			},
+			onChange: () => {}
+		});
 	});
 	const live = () => resolveOptions(ctx, current());
 	const usage = new UsageTracker({
@@ -334,7 +333,6 @@ export {
 	TavilySearchProvider,
 	UsageTracker,
 	WEB_SEARCH_SETTINGS_NAMESPACE,
-	WEB_SEARCH_TAVILY_SETTINGS_NAMESPACE,
 	apply,
 	findProvider,
 	inject,

package/lib/rest.js

@@ -188,7 +188,7 @@ export class RestSearchProvider {
 		const query = {
 			[queryParam]: request.query
 		};
-		if (countParam !== "") query[countParam] = String(count);
+		if (countParam !== "") query[countParam] = queryIn === "query" ? String(count) : count;
 		const keyed = options.keyed === true;
 		for (const param of options.params ?? []) {
 			const resolved = resolveParam(param, { keyed, ...options.settings ?? {} });
@@ -295,8 +295,12 @@ export class RestSearchProvider {
  */
 export function resolveRestProvider(ctx, row, opts) {
 	const { config, settings } = opts;
-	const auth = row.auth ?? { type: "none" };
+	let auth = row.auth ?? { type: "none" };
 	const keyed = opts.keyed === true;
+	// A provider can be keyless by default (e.g. Tavily keyless mode); when no
+	// key is expected, drop the auth template so the generic backend does not
+	// demand a credential before the request.
+	if (row.keyRequired === false && keyed !== true) auth = { type: "none" };
 	const base = {
 		baseURL: row.baseURL,
 		method: row.method ?? "POST",

package/lib/shared.js

@@ -7,7 +7,7 @@ import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
 import { WebError } from "@deepseek-ai/dsh-web";
 
 /** Attribution header sent on every request. */
-export const USER_AGENT = "dsh-web-search-plugin/0.2.1";
+export const USER_AGENT = "dsh-web-search-plugin/0.4.0";
 /** Shared cap: Tavily `max_results` and Brave `count` both accept 1..20. */
 export const MAX_RESULTS_CAP = 20;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-web-search-plugin",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Unified web search for the DeepSeek Harness seam (ctx.web): DeepSeek (official), Tavily, Brave, Serper, SerpApi, Exa, SearXNG, Scavio, and Firecrawl backends",
   "keywords": [
     "dsh-plugin",
@@ -43,9 +43,7 @@
     "client": {
       "platform": "web",
       "inject": [
-        "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-slots",
         "@deepseek-ai/dsh-api-remotes"
@@ -59,12 +57,12 @@
     "undici": "^6.21.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-web": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-credentials": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-launch-environment": "^0.1.0-rc.7",
-    "@deepseek-ai/schemastery": "^3.18.1",
-    "@deepseek-ai/cordis": "^4.0.1"
+    "@deepseek-ai/dsh-web": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-credentials": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-settings": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-launch-environment": "^0.1.2-alpha.4",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@deepseek-ai/cordis": "^4.0.2"
   },
   "license": "MIT",
   "repository": {